Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: JzHh9WQQuyWJUSmORbs1O+Ex5t1ETwYdirJH/EJPce4=
Subject key identifier: 1C:7B:B8:29:25:11:24:70:E4:8C:61:F9:7E:A0:CB:93:9F:CF:6F:8C
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 01969ED13462CBD450D9DDFA8587998EFDF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 05:00:32 +0000
Manifest this update: Mon 05 May 2025 05:00:32 +0000
Manifest next update: Tue 06 May 2025 05:00:32 +0000
Files and hashes: 1: 1Z0qsk9StCFAQktZcYQaKAQv6Eo.roa (hash: 7ZoC6UA8RmSyn6UoUQLfpDC2951iCi7ws/lgZfO/s3U=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: X6pVFmwuRzHuLZE71+x9w7dWyBmUq8GLtGPrPMebxcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:34:62:cb:d4:50:d9:dd:fa:85:87:99:8e:fd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: May 5 05:00:32 2025 GMT
Not After : May 6 05:00:32 2025 GMT
Subject: CN=1c7bb82925112470e48c61f97ea0cb939fcf6f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:bc:15:6d:81:d3:6f:a6:97:25:07:64:76:
bc:aa:f1:30:fc:9f:8b:d0:2b:c0:38:8f:29:92:78:
31:f3:db:13:ad:6e:ce:96:ee:6d:a1:52:13:e7:96:
9f:d2:ca:5f:e3:6f:a6:5f:36:41:f6:2e:d1:bb:d0:
ac:83:a3:84:be:67:a0:43:ec:23:d6:da:af:f6:9c:
ca:87:6a:50:1c:fa:be:1a:f0:0c:8a:1c:ab:59:d8:
1d:1c:78:bd:26:99:74:c6:49:15:d9:ef:72:19:aa:
94:96:b4:9b:f9:93:2f:62:cf:aa:d3:64:3d:43:84:
db:1f:cd:73:76:b4:02:79:06:52:14:19:a8:3e:31:
05:5e:d5:81:62:09:66:c3:6b:60:23:ee:0f:bd:0f:
ae:e5:6a:9e:e3:c8:6b:82:0c:01:d1:11:68:44:d9:
5d:ec:77:85:f1:5f:1e:8a:99:be:70:20:d8:c2:31:
6a:3a:72:86:69:0c:ed:6a:87:bf:2b:d5:45:c6:28:
19:d1:73:1a:8e:71:39:99:d8:dc:76:9a:57:65:da:
ac:dc:47:c3:0c:57:d1:3b:84:65:f1:64:c4:d8:f6:
45:6d:47:c3:c9:c3:d8:bb:88:c3:74:9d:27:ea:1c:
27:5d:d7:0a:f8:db:fb:41:d0:84:79:c7:7f:e3:f3:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7B:B8:29:25:11:24:70:E4:8C:61:F9:7E:A0:CB:93:9F:CF:6F:8C
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:af:7b:4b:1b:fa:6c:71:96:85:e0:68:fd:2c:ca:f5:dc:b0:
b1:42:4d:3e:f6:4f:35:59:fa:35:cd:f0:2c:2a:9a:c6:31:2b:
60:05:b4:c3:ae:7c:08:7d:a7:d2:78:f5:e1:da:93:e6:4a:4c:
bc:6e:09:4b:0c:3b:db:19:01:d8:96:e6:d0:05:b2:f4:36:ee:
2e:2a:c1:0a:30:cc:c4:85:9d:d1:b7:9e:8e:25:27:8b:c9:d4:
e4:9d:e0:eb:15:52:71:dc:85:72:b1:bb:ae:77:c9:fc:27:29:
b4:ad:ea:a6:35:65:57:a8:e8:31:6a:26:db:1f:ab:50:01:7d:
99:fc:75:3b:26:89:ea:91:fb:ef:3e:06:24:89:f9:b5:a7:0d:
8d:c4:01:fe:82:4b:78:e0:92:ea:83:60:b6:4e:70:ef:36:c1:
3a:f6:2c:a1:5b:fe:d7:06:f6:bd:f0:16:2d:28:7c:c1:06:8a:
90:c2:50:41:ed:da:62:46:e2:ab:70:23:8e:5d:fe:26:8f:91:
c3:db:fe:7e:b5:82:15:36:ea:7e:39:19:a1:18:be:79:b7:bb:
9c:d7:e6:3d:ee:d6:2f:80:30:3d:3e:8a:56:94:58:7b:d0:1a:
79:64:19:99:2b:5c:d3:23:db:9a:0d:95:fb:74:a9:31:2f:8e:
9e:26:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:28:25 2025 by rpki-client